Villatheme vulnerabilities
80 CVEs and advisories name Villatheme as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-12861W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
- CVE-2025-22803WordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2022-46796WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability
- CVE-2024-49283WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-49288WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-8277WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation
- CVE-2024-4039Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-1687Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
- CVE-2024-1686Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export
- CVE-2023-50831WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48778WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-30482WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2021-4395Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass
- CVE-2021-4379WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
- CVE-2021-4376WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
- CVE-2022-46810WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46812WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46806WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-44634WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability
- CVE-2022-41623WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability